View the filter that was added by expanding out the details of the query in the workflow history and notice the details of the query use the 'lastlogon date' attribute.
out details of the query in the Workflow history and seeing that the query
uses the 'lastlogon date' attribute.
Anytime the lastLogonTimeStamp is included, a filter is also
added for the whenCreated attributed. The same value that is used for the
last logon in days is used for the value comparison for whenCreated,
effectively ignoring any newly created accounts.